Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier: OOMZsyoF6ePvudikTdmCptT3eakB09VjjUclhRc/fd4=
Subject key identifier: 20:E1:37:A3:8B:4A:AF:58:57:D8:1A:6F:B1:2C:17:5E:30:F9:C0:B9
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial: 0194BD85AA534EC1C1D881A3D68272A647FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number: 0FD5
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=)
2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: u/2bnLnBcYhL2tO2btHahjkCMnbeMaOWwNPFUZogB9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:53:4e:c1:c1:d8:81:a3:d6:82:72:a6:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=20e137a38b4aaf5857d81a6fb12c175e30f9c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:ef:27:4a:90:2c:04:22:93:24:d4:f7:d8:
05:80:db:e5:6a:e4:02:4f:c3:23:dc:cb:20:5f:13:
e5:8c:7d:d0:d7:19:28:2f:5a:8b:11:5a:67:e6:49:
7a:1a:85:89:db:a5:7f:af:35:2b:1d:5e:dd:4a:54:
8e:07:e8:2b:6f:e8:8f:ba:f2:a2:a6:a7:03:53:31:
86:77:85:0a:22:70:36:25:d4:0c:7f:13:2f:9d:77:
89:5d:63:aa:b4:eb:72:d4:3c:30:51:ac:f8:7d:7a:
c5:c2:63:3d:e9:cd:7a:51:ac:44:fa:95:f5:f9:9a:
ef:59:df:68:f4:7a:b8:dd:5e:8b:30:a0:a6:fc:eb:
18:04:64:ab:fc:c0:63:f8:b1:8c:29:db:ce:5c:04:
83:38:98:f9:0b:c2:06:1b:8e:7b:b0:89:ed:15:ab:
6b:c0:b7:a3:b3:56:cf:29:a8:3e:3d:61:ca:6a:92:
2a:88:97:09:57:90:6d:ff:e0:ef:b9:75:26:4a:db:
80:84:75:75:44:cd:9b:61:1f:4a:70:0c:58:01:9c:
69:1f:67:d8:ae:5e:11:2a:c9:32:fa:a9:9f:08:10:
88:a1:ed:31:be:74:e2:fc:ae:6e:c7:c5:f6:d3:75:
0a:0b:ca:0b:5a:73:7f:d7:10:27:7f:10:d9:6e:76:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:37:A3:8B:4A:AF:58:57:D8:1A:6F:B1:2C:17:5E:30:F9:C0:B9
X509v3 Authority Key Identifier:
keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:78:99:26:38:59:44:a2:d9:85:c9:4a:9e:f8:9b:f4:7c:a0:
21:33:83:23:de:d2:bb:70:58:44:c7:9c:00:15:92:be:22:73:
2f:c7:63:5d:ef:6e:af:70:73:79:25:a9:47:9c:88:30:8f:2b:
41:f2:cf:ff:c1:92:7d:97:6d:ac:df:48:88:db:f5:cd:b0:54:
09:a0:19:12:be:48:19:5b:9b:63:8a:a7:73:ac:bf:06:bd:2d:
dd:5e:9a:2e:a9:6d:0a:7c:e9:76:1d:41:3e:23:ee:58:53:19:
cc:fd:61:52:a2:98:f2:7c:dc:48:04:59:a8:40:14:c1:14:6f:
e5:fe:49:c9:ba:ab:34:1e:89:8a:73:4b:c6:14:cc:10:06:24:
a9:20:0f:77:8d:e3:37:72:05:ff:be:57:de:44:7e:44:39:bb:
18:57:1f:e2:c0:24:57:95:63:95:d6:e9:86:24:22:43:f3:f9:
73:2f:74:aa:ea:f1:a9:c9:f8:52:7f:77:d8:3c:46:be:30:2f:
0d:4f:89:63:d6:48:42:76:88:5c:84:fc:a2:12:43:a6:8f:fc:
eb:7c:cc:60:37:9f:81:e2:e2:73:f2:f9:61:d6:4f:3a:7a:84:
4d:4f:6a:85:fb:02:6a:52:ee:b5:3e:cc:10:25:82:33:b3:9f:
7c:33:e0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hapTTsHB2IGj1oJypkf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy
MzdiN2QwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygyMGUxMzdhMzhiNGFhZjU4NTdkODFhNmZiMTJjMTc1ZTMwZjljMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvvJ0qQLAQikyTU99gFgNvlauQC
T8Mj3MsgXxPljH3Q1xkoL1qLEVpn5kl6GoWJ26V/rzUrHV7dSlSOB+grb+iPuvKi
pqcDUzGGd4UKInA2JdQMfxMvnXeJXWOqtOty1DwwUaz4fXrFwmM96c16UaxE+pX1
+ZrvWd9o9Hq43V6LMKCm/OsYBGSr/MBj+LGMKdvOXASDOJj5C8IGG457sIntFatr
wLejs1bPKag+PWHKapIqiJcJV5Bt/+DvuXUmStuAhHV1RM2bYR9KcAxYAZxpH2fY
rl4RKsky+qmfCBCIoe0xvnTi/K5ux8X203UKC8oLWnN/1xAnfxDZbnY11QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDhN6OLSq9YV9gab7EsF14w+cC5MB8GA1UdIwQY
MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt
Mzg1ZjNmNTJhOTZiLzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi
LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuniZJjhZ
RKLZhclKnvib9HygITODI97Su3BYRMecABWSviJzL8djXe9ur3BzeSWpR5yIMI8r
QfLP/8GSfZdtrN9IiNv1zbBUCaAZEr5IGVubY4qnc6y/Br0t3V6aLqltCnzpdh1B
PiPuWFMZzP1hUqKY8nzcSARZqEAUwRRv5f5JybqrNB6JinNLxhTMEAYkqSAPd43j
N3IF/75X3kR+RDm7GFcf4sAkV5VjldbphiQiQ/P5cy90qurxqcn4Un932DxGvjAv
DU+JY9ZIQnaIXIT8ohJDpo/863zMYDefgeLic/L5YdZPOnqETU9qhfsCalLutT7M
ECWCM7OffDPgXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client